This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json) Hash identifier: UgX4EelsG4c9Qj0g1I/Ifhe5fqW7iRH3wcE5yeAxYrI= Subject key identifier: 50:FA:5D:76:95:45:52:BA:6F:18:5A:35:E8:13:34:F6:02:1C:D3:27 Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f Certificate serial: 019B36458D9010C8873FD14D736D20C72BC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft Manifest number: 0DC6 Signing time: Fri 19 Dec 2025 11:01:26 +0000 Manifest this update: Fri 19 Dec 2025 11:01:26 +0000 Manifest next update: Sat 20 Dec 2025 11:01:26 +0000 Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=) 2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: 6ZPiU/HjOqcCuoqKVGdRqobSwUlEc+RZarQ8LvvZRH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:8d:90:10:c8:87:3f:d1:4d:73:6d:20:c7:2b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f Validity Not Before: Dec 19 11:01:26 2025 GMT Not After : Dec 20 11:01:26 2025 GMT Subject: CN=50fa5d76954552ba6f185a35e81334f6021cd327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:b1:9e:6f:65:f6:bd:0c:64:a7:c8:7b:1e: f2:ad:6f:c7:88:1f:68:ce:26:b2:0c:d5:ce:a2:66: d7:c7:2f:9f:46:10:df:58:ca:cc:66:09:0f:28:ce: de:4b:a0:2e:cd:f2:89:22:25:5d:82:a3:e9:f8:e4: 6e:e7:90:92:a4:d0:68:20:7e:2a:fa:f9:b4:3e:55: 83:a9:f6:b6:2e:15:e6:ae:01:67:91:4b:6e:7f:6c: d3:88:f4:b1:e4:e2:58:13:52:97:13:bc:11:eb:47: 0e:6b:79:c4:a4:5a:d6:3a:06:8e:f7:37:03:10:70: 6f:f2:a8:94:29:28:68:cd:50:af:9d:0b:aa:cb:2f: dd:1e:a4:f4:a9:54:a0:99:cb:68:b3:93:6e:b7:14: ee:9a:df:ea:0c:70:e3:89:b4:6e:d5:f8:5f:17:08: b1:9e:0e:ae:e8:ac:e5:24:9c:e9:00:87:54:73:a9: 17:34:de:59:8d:cf:28:c0:79:ff:62:41:19:fd:a1: a4:ea:60:8d:6c:97:90:9b:c4:d9:61:bc:e3:82:0c: 6c:9f:50:37:f5:cb:46:91:89:ef:8c:a5:48:d8:b3: 56:fe:38:bd:5a:61:2f:03:db:f0:84:0a:18:2f:23: d9:d7:02:bf:17:8c:05:f7:83:56:f0:3b:1e:38:74: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FA:5D:76:95:45:52:BA:6F:18:5A:35:E8:13:34:F6:02:1C:D3:27 X509v3 Authority Key Identifier: keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a2:ac:bf:ca:09:ed:2f:65:7e:a3:4b:56:4c:06:23:fc:4f: cc:ad:f5:02:01:8a:9c:56:7d:28:43:60:90:9f:bb:1c:7b:24: da:0a:9d:1f:4d:8b:ab:f1:36:b6:61:0d:a1:d2:8a:90:78:f2: 94:e8:a9:df:37:18:10:35:4f:9c:fb:fe:cd:90:28:ac:d8:a7: 7b:67:1b:b0:72:2b:7b:01:de:2a:09:7f:4c:a8:60:83:80:ba: 17:45:60:34:d2:65:a5:25:63:fe:8a:c5:e3:54:9e:65:12:09: 33:5e:93:c5:88:8d:2e:90:70:20:b1:c4:8f:6f:57:98:c1:86: 34:df:ee:da:64:db:d8:a7:b8:c9:32:a3:2f:12:44:54:2a:2a: 64:8e:de:a0:6d:c6:44:f1:4a:83:bc:b1:b0:92:08:7e:25:67: cc:8e:f9:1f:f0:47:a3:df:27:f6:cb:ac:96:80:8a:4f:a1:12: 2e:64:5d:a0:2b:09:11:56:f2:90:dc:0d:cf:7f:d3:e3:6f:c1: 5e:30:21:08:f7:70:41:eb:97:2f:18:fb:49:86:19:99:f8:18: c4:ff:02:57:62:cf:e3:fa:09:0d:58:7b:74:5c:5c:fb:d8:0a: 42:45:7d:2a:2e:d6:b6:e6:61:6c:e5:08:1b:06:3c:96:b6:78: c4:be:27:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RY2QEMiHP9FNc20gxyvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh MmE1MGYwHhcNMjUxMjE5MTEwMTI2WhcNMjUxMjIwMTEwMTI2WjAzMTEwLwYDVQQD Eyg1MGZhNWQ3Njk1NDU1MmJhNmYxODVhMzVlODEzMzRmNjAyMWNkMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy6xnm9l9r0MZKfIex7yrW/HiB9o ziayDNXOombXxy+fRhDfWMrMZgkPKM7eS6AuzfKJIiVdgqPp+ORu55CSpNBoIH4q +vm0PlWDqfa2LhXmrgFnkUtuf2zTiPSx5OJYE1KXE7wR60cOa3nEpFrWOgaO9zcD EHBv8qiUKShozVCvnQuqyy/dHqT0qVSgmctos5NutxTumt/qDHDjibRu1fhfFwix ng6u6KzlJJzpAIdUc6kXNN5Zjc8owHn/YkEZ/aGk6mCNbJeQm8TZYbzjggxsn1A3 9ctGkYnvjKVI2LNW/ji9WmEvA9vwhAoYLyPZ1wK/F4wF94NW8DseOHRwDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFD6XXaVRVK6bxhaNegTNPYCHNMnMB8GA1UdIwQY MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt ODNhMjVhOTRjNzdmLzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKKsv8oJ 7S9lfqNLVkwGI/xPzK31AgGKnFZ9KENgkJ+7HHsk2gqdH02Lq/E2tmENodKKkHjy lOip3zcYEDVPnPv+zZAorNine2cbsHIrewHeKgl/TKhgg4C6F0VgNNJlpSVj/orF 41SeZRIJM16TxYiNLpBwILHEj29XmMGGNN/u2mTb2Ke4yTKjLxJEVCoqZI7eoG3G RPFKg7yxsJIIfiVnzI75H/BHo98n9susloCKT6ESLmRdoCsJEVbykNwNz3/T42/B XjAhCPdwQeuXLxj7SYYZmfgYxP8CV2LP4/oJDVh7dFxc+9gKQkV9Ki7WtuZhbOUI GwY8lrZ4xL4noQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:12 2025 by rpki-client